Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/ab-VaAjbAQkL69OxNNY9Y9b82F0.roa
File: ab-VaAjbAQkL69OxNNY9Y9b82F0.roa (raw, json)
Hash identifier: uX/wL/o/5DCznS2vJnA6hK8za3pBE0GC3CY/4df4riw=
Subject key identifier: 69:BF:95:68:08:DB:01:09:0B:EB:D3:B1:34:D6:3D:63:D6:FC:D8:5D
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 01933C957D202025A37229A6A406D8F82A8A
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/ab-VaAjbAQkL69OxNNY9Y9b82F0.roa
Signing time: Mon 18 Nov 2024 00:04:10 +0000
ROA not before: Mon 18 Nov 2024 00:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4913
IP address blocks: 93.190.185.0/24 maxlen: 24
93.190.186.0/24 maxlen: 24
93.190.187.0/24 maxlen: 24
93.190.188.0/24 maxlen: 24
93.190.189.0/24 maxlen: 24
93.190.190.0/24 maxlen: 24
109.71.185.0/24 maxlen: 24
109.71.186.0/24 maxlen: 24
109.71.187.0/24 maxlen: 24
109.71.188.0/24 maxlen: 24
109.71.189.0/24 maxlen: 24
109.71.190.0/24 maxlen: 24
185.28.84.0/24 maxlen: 24
185.28.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3c:95:7d:20:20:25:a3:72:29:a6:a4:06:d8:f8:2a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Nov 18 00:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69bf956808db01090bebd3b134d63d63d6fcd85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:55:a3:84:a2:b5:ce:6d:20:6e:e4:5b:f9:40:
b1:aa:47:1f:39:e8:b7:4f:f5:a6:52:96:4c:1f:de:
0c:b3:1f:e7:1a:bd:de:b9:ae:d9:b2:a6:c5:58:36:
cb:19:ae:2b:33:16:29:2b:cd:87:99:be:c1:27:de:
70:67:f6:5a:1c:37:be:75:4c:43:a9:33:62:37:11:
03:9c:27:da:c8:66:d6:f4:c7:74:7a:06:83:b7:46:
79:20:47:2d:6b:64:f2:0d:a7:78:51:59:d2:41:03:
9d:f3:ae:c5:ae:ba:44:d2:e8:9e:49:a9:c1:dc:24:
00:3f:43:1c:e7:e0:bb:18:03:33:78:73:d4:3c:24:
ef:9d:85:14:c4:9f:43:b4:e3:9c:d6:b4:89:e8:2b:
0c:7c:96:62:85:78:0f:4e:ec:10:d2:4c:4a:2b:ac:
ba:7b:cd:4e:85:6d:49:6c:45:dc:27:68:f0:03:ab:
32:b7:47:99:25:9f:45:7c:59:de:33:35:2c:a7:11:
0a:7b:13:d1:3c:d6:9d:94:e8:cf:63:85:6e:10:bb:
5a:78:0e:0c:01:e4:c3:b5:31:cf:2c:3e:a1:df:d5:
c4:1e:9a:66:ac:7d:94:ab:52:d4:96:78:3e:39:90:
e4:c7:4a:60:87:5e:1d:22:85:1c:66:fb:63:e9:50:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BF:95:68:08:DB:01:09:0B:EB:D3:B1:34:D6:3D:63:D6:FC:D8:5D
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/ab-VaAjbAQkL69OxNNY9Y9b82F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.185.0-93.190.190.255
109.71.185.0-109.71.190.255
185.28.84.0/23
Signature Algorithm: sha256WithRSAEncryption
31:a2:6a:ea:d5:4b:89:33:5e:21:db:ac:79:8b:00:9a:c4:01:
55:db:29:9b:13:77:fc:f6:bd:1e:8e:eb:e9:a3:a5:0c:77:6c:
43:77:3d:47:d8:ff:78:ed:b2:7f:3b:a5:d6:5d:27:e4:55:9b:
7e:80:b5:5d:e0:03:3b:78:75:5b:95:bb:d1:b8:2c:ee:63:94:
c9:25:4c:21:b5:be:07:52:c5:67:6c:6a:2f:51:a0:53:56:d9:
e3:8c:27:38:3e:07:09:3f:59:e2:4f:a5:23:9e:40:de:7d:0e:
5d:d2:03:90:53:46:ea:0a:fc:63:27:7b:b9:33:58:f0:6c:ae:
08:33:ab:8b:0f:3d:9a:b7:1e:6c:af:fc:61:8d:c2:e8:24:bb:
10:77:bc:8e:68:9c:80:b0:87:67:8c:6b:9a:97:55:b7:6d:38:
de:41:f9:fc:11:6e:60:19:f8:df:dc:e0:8e:c0:9c:fc:b5:d7:
04:ff:82:cb:1d:b4:d6:09:4f:5f:82:09:df:94:2a:03:30:15:
3e:da:38:2a:83:c4:9d:18:13:f1:81:a4:26:72:46:b9:d2:d3:
5d:25:45:16:57:81:73:29:9f:fd:de:24:9a:b3:3b:f3:58:f0:
b1:e5:ca:ae:ce:bf:b5:53:a9:38:74:50:13:a9:4e:f6:12:39:
6a:8a:e9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:15:30 2024 by rpki-client on console-fra.rpki-client.org